I think I would focus on AAA configuration. Once you can authenticate with username and password NCM works great. MUCH easier than writing a custom template.
So simple.... Here's the config
enable secret MyP@55w0rd!
username MyAdm1n privilege 15 secret <MyP@55w0rd>
aaa new-model
aaa authentication login TEMP local
line vty 0 4
exec-timeout 15 0
login authentication TEMP