first login page
check username & password