[SR-Users] Meddling with password during authentication