signin check for valid username and password