Authentication: not possible with plain HTML
Authorization: not possible with plain HTML
User administration (including changing passwords): not possible in plain HTML
Sessions: not possible with plain HTML

For all 4 you'll have to at least code something up in JavaScript, or call any CGI backend (Shell, C, JSP, PHP, Perl, ...)