Needed send in every request to server user password, in the latter case?