wrapping login, logout, etc for services like cognito. implement 'sauth', a simple user/password/token based auth