login works with static user list