login works, hardcoded random values