added login feature, still no authentication