simple login form, no flags