start creating api logging in (right now can get by the token auth)