let curl handle the login/pwd