username/pwd check WORKS