Pubkey = login, signed login challenge = password. Address' pubkey can be used to not spawn an extra pubkey for the account.