upstream assert and login