searching user w/ username and password is working. currently working on sessions
working on login