login form and auth working