authenticate plain, and virtual users