login and auth half complete