move login-factory logic to user-factory
delete login-factory + routes