authenticate(ident username, string password) {
  assume exists //accounts/account[username];
 
  assume //accounts/account[username]/password = password;
}