login form works for a single user/password pair