EncryptedPasswordAttr, it will be used instead of
PasswordAttr, and PasswordAttr
is ignored. You must specify either PasswordAttr or
EncryptedPasswordAttr or
ServerChecksPassword.# HTTP server sends plaintext password with pw parameter PasswordAttr pw