modify login logic, add password check