[FIX] require login returned jsend with set, not dict
[FIX] don't require login for get_auto_ship