Login update

login now returns user instead of boolean