implementation of user login nearly finished. corrected the bug with checking expired transactions