recovers a json with the user/password and returns another json