login callback for manual login flow