sign in checks username and password against yaml