default loginURL now uses apiURL domain