clarification about user login