login looks for admin and user