re-jigging the login system