POST /user/login endpoint

Request body: { "username": "...", "password": "..." }

Validate both fields exist and non-empty

Respond with error if missing fields

Respond with success or failure message