asks for login credentials