one-time user login as interim before persistent signin