[Zope] do I need to get user's password?