authentication login server and related API