add username and password check