remove inline login, no one is using this
login() method should return user_id rather than bool