initial state asks for login