create simple api for login #5