server side Authentication: phase 1

> querying the db and retrieve the user.
> send back json data