woohoo, use undocumented api method to log in!