allow incoming URL to log user in and potentially add user as well