more work on login request