login works with password