I wasn't talking about verifying a password for every action, but simply having more than one user of your service at once.