fix hardcoded login endpoint, uses config's data