add: user login (logic)