now the login actually checks to make sure the password is correct