create direct login endpoint