handle login request