finish log-in and auth/auth