implemented basic login, still need to handle errors and security roles