setup basic login on server-side, moving to client side