changed the login process a little bit

the user and user-role tables are now managed by hibernate as well