allow native login, toggleable via config.php