draft login scope header
wip