login works, including remember me