login only with correct uid and pwd possible