data transfer object for login flow