login file with very basic validation