login logic verification