working login (hardcoded username and pass)