when giving correct password, user can login