basic login and persistent sessions working