no need for user might be email kwarg in check_login_simple