user is now able to log-in

still lacking some error checks