return user object in get_login