add url param 'login=false' to bypass login and use retainer.db