created the login.php page
converted initial INSERT into a prepared statement