http api for logging in, uploading cards, etc.