logging in works for sandbox