user can login with valid email and password