String account = payload.getAccount();
String password = payload.getPassword();
if (account != null && account.length() != 0 && password != null) {
SigninContext sc = createSigninContext(ctx);
Credential credential = new Credential(account, password);
Session session = m_signinService.signin(sc, credential);
if (session == null) {
ctx.addError(new ErrorObject("biz.login"));
} else {