Log the user in from the backend

thanks @Jici. I think you convinced me to try the oauth2 route. I wrote a new topic on that.