simple auth now handles login