changes to authenticate username and password with DB