How does someone login via this system? I'm asking because it has the force of law. In that sense, I can't imagine that passwords alone would be enough.