refactor(user): change how login works, no more 404