can now login, still missing some checks