user login and registration, TODO logic