login finished.  no password check