major update. added login auth