js client should login on external server