First implementation of login (missing token generation right now)