login via pop up
fixed setauth token fn