login function removed : userId auto assigned