login works with username and password