Refactor login logic to the login widget.

**DO NOT MERGE**

A little work needs to be done yet.
why is this todo removed? is it handled?