complete login endpoint