login sends id with username