- validate login against db data