login flow totally works