add login and pass get from db