Authenticate user's password only, but doesn't mark user's status as loginpost http://127.0.0.1:8080/authentication/password/validation