Wouldn't it be easier to simply require the password and the account?