you must have user name + password to log in