Login confirm working - needs hash next