login with Ajax but needs fixing