user paramenter is transfert to app and lookup in database
login checks password with database using salt