like here: http://blog.montyprogram.com/security-with-two-step-verification/ the password is supplied by the client and it's used, as expected.
like here: http:// blog.montyprogr am.com/ security- with-two- step-verificati on/
the password is supplied by the client and it's used, as expected.