implementing login (wip)