users can login
A much more sane user authentication approach