added db lookup for username and pass