login implemented (server & client side)