logging in works and shows user