code: function(password) {
        // empty password not allowed
        if (password) {
          var hmac = forge.hmac.create();
          hmac.start('sha256', SECRET);
          hmac.update(password);
          this._password = password;
          this._passwordHash = hmac.digest().toHex();
        }
      }
docs: Set the password for interactive login
  @param {String} password The password for the login