add login module

use mongoose to verify username and password.