added login action to user controller 8/18/14