request token, make login working