Login now checks user credentials