don't use auth.login in the api (bug 870368)