first commit
simple login page checks username/password against registered users