added simply email-based authentication. at the moment it doesn't do anymore than allow login and logout