login/login.php, used by app to authenticate user