not working but has the logic for username/password checking