login function but w/o encryption