added login, still need to handle lookupUser