basic login
xsrf, current_user