login with hashed password