login controller
passing username and password