logging in with password works