removed extraneous code
fixed validation on login to make sure pw matches pw stored in database for user