login controller somewhat works