WIP
user can login with valid email and password