Understanding login protocols