validate user login, findOne()