further work on login, actual front-end js next