JS[login] basic local login and register, password-local strategy