implemented pdo instead of mysqli in login