login done (login via db not fully supported, yet)