fixes #111: enable login via api