hid the login form; all logins through oauth now