close #3. login facility without checking token
update tento/web/add.py