added a user image to login blurb
fixed bug which caused auth.tokengetter to return the auth/refresh tokens out of order, breaking all api calls