working on api/login