refactor checkIdentity to return a model; encode in API
wip: login AuthHelper