fixed login, now time to do AJAX