verify a users credentials with name / pass