login service - not complete though almost there