auth: add login auth