Rename user_login to check_user_credentials
Change so that id is stored instead of email in the session