login, redeem.
according to the design
some more API functions needed (see email)