simple login without password, backend operates through userid