auth improvements
login implemented