updated login endpoints