add method to retrieve user by username / password