login converted from soap to rest