login working, with db validation