now using return res.send for user login check (live)