add login authentication (user details in database)