auth user
TODO:
  redirect when loggin successfully
  session handling