email login validates with db