Controller logs in user