authenticate(ident username, string password) { assume exists /account[username]; assume /account[username]/password = password; }