login ui and token based authorization
spearate out new things into separate files