simple login, and controller is pretty much done