diff --git a/web/Cargo.toml b/web/Cargo.toml
index e207bff..5f09708 100644
--- a/web/Cargo.toml
+++ b/web/Cargo.toml
@@ -27,3 +27,4 @@ apb = { path = "../apb", features = ["unstructured"] }
 futures = "0.3.30"
 dissolve = "0.2" # TODO strip html without this crate
 lazy_static = "1.4"
+chrono = { version = "0.4", features = ["serde"] }
diff --git a/web/src/lib.rs b/web/src/lib.rs
index 6d3acc2..457364a 100644
--- a/web/src/lib.rs
+++ b/web/src/lib.rs
@@ -17,7 +17,7 @@ struct LoginForm {
 
 fn web_uri(kind: &str, url: &str) -> String {
 	if url.starts_with(URL_BASE) {
-		format!("/web/{kind}/{}", url.split('/').last().unwrap_or_default().to_string())
+		format!("/web/{kind}/{}", url.split('/').last().unwrap_or_default())
 	} else {
 		format!("/web/{kind}/+{}", url.replace("https://", "").replace('/', "@"))
 	}
@@ -31,17 +31,25 @@ fn api_uri(kind: &str, url: &str) -> String {
 	}
 }
 
+#[derive(Debug, serde::Deserialize)]
+struct AuthSuccess {
+	token: String,
+	user: String,
+	expires: chrono::DateTime<chrono::Utc>,
+}
+
 #[component]
 pub fn LoginBox(
 	rx: Signal<Option<String>>,
 	tx: WriteSignal<Option<String>>,
 ) -> impl IntoView {
+	let (username, username_set) = create_signal("".to_string());
 	let username_ref: NodeRef<html::Input> = create_node_ref();
 	let password_ref: NodeRef<html::Input> = create_node_ref();
 	view! {
 		<div>
 			<div class="w-100" class:hidden=move || { rx.get().unwrap_or_default().is_empty() }>
-				"Hello "<a href="/web/users/test" >test</a>
+				"Hello "<a href={move || web_uri("users", &username.get())} >{move || username.get()}</a>
 				<input style="float:right" type="submit" value="logout" on:click=move |_| {
 					tx.set(None);
 				} />
@@ -59,9 +67,11 @@ pub fn LoginBox(
 							.json(&LoginForm { email, password })
 							.send()
 							.await.unwrap()
-							.json::<String>()
+							.json::<AuthSuccess>()
 							.await.unwrap();
-						tx.set(Some(auth));
+						tx.set(Some(auth.token));
+						username_set.set(auth.user);
+						console_log(&format!("logged in until {}", auth.expires));
 					});
 				} />
 			</div>