User Login (process_login)

I would suggest taking a look at some authentication plugins, even if
you don't actually end up using one of them.

I personally like the restful_authentication plugin:

http://agilewebdevelopment.com/plugins/restful_authentication