simple password auth is bad and shall likely go but it's easy for now and i need a way to login to test user interactions as i make the outbox working