8 commit: sign in // validate user