login api : responding with user document