login system implementation (no catch if bad login)