login and credentials now both work without xhrManager