user can login with correct email and password