implements login via password auth; fixes handling cases for error oauth callback and warden error callback