And what do one has to do when the authorization - with a custom login module - needs more information than just user name and password - e.g. an additional mandator name (multi mandator application)?