finished up token / login system