rest sso: login to string