add transaction and deprecate login.php