test user/pass against DB to verify user