better error handler
find user AND password