user logins in

[randygit]

• enter email
• enter password
• user has to enter correct password 3x else his account will be disabled
• user has option to ask for new password
• if password is correct, he is redirected to home page of user

[randygit]

if the temporary token is not done. the login screen should require the new user to change the temporary password