User password authentication
minimal sign in func