oh, didn't realize userServices handles /login redirect
make login a form