changed db username and password. added login logic. need more research on login