Password gate; single sign-on replaces this later.