second tutorial step
fixed login URL