login functionality working with a hack, maybe we should add a login page