use userstore for user and password retrieval