allows a user to log in