- initial login implementation (no passwords yet)