Login: make authenticator pluggable