login credentials are now sent to the server