login works as expected