Yeah that's what I do, get user id from email then check password