Implement onetime login page and handler on app but plugin