authentication via database, stage I