authentication filter
log in database