working on SPA login flow w/ authentication"