```user.login``` is correct, user attribute should hold just login not user object
however to make an authentication we must find the user instance on previous line