userService.login should make query for user,pw