simple auth login working without cookies