use the auth endpoint to login and show error messages for failures