moved login methods to CAT_Users.php