add fake login for development
rewrite in slim