check on user and pwd