Usernames and passwords are validated by the client and server.