login: store passwords in separate user files