acts as a login server and sometimes as a redirect server