we should be able to login via the app user