login.php checking for user and pass
redirect or show msg error if login is correct or false