auth.py prototype part 1 (login, isLoggedIn)