fixed app.js: it now uses login and futapi instances