code: func (c *Client) CheckPassword(user string, password []byte, otpToken string) error {
  	_, err := c.PostJSON(
  		c.Endpoint("users", user, "web", "password", "check"),
  		checkPasswordReq{
  			Password: string(password),
  			OTPToken: otpToken,
  		})
  	return trace.Wrap(err)
  }
docs: // CheckPassword checks if the suplied web access password is valid.