log in only if username and password is correct