login system works with API credentials