Basically…check WP credentials, and if not valid, check OpenCart credentials. If WP authentication is invalid and OC authentication is valid, then hash the password in WP format and store it in the WP _users table.