move login to auth, remove duplicate methods"