supplying logins is optional now and derived from npm packages if not supplied