got login working with non-web flow