move Authenticator to models package
add login API
create login API