basic api things, user logging in