login auth now working