validate login using access proof