plain text JSON login implementation #39