now we have server side login check