still fighting with the login strategy