user and password implemented