Login handler now accepts/authenticates user creds from incoming json request, added test cases for func