change login post action to /login
add function to check if user exists
basic user authentication