fix: replace jsSHA with hmac.enc
dev: ref
upd: added /login