login

needs validation and duplicate prevention.