popup posts login request, passes back username if validated