implemented login
new login, asks for scope, inspects msg format