basic login working, api token saved in app delegate