login may be set at this point