working up login and auth-token cacheing