login now checks username/password