implement verify a user name and password