I would caution against using wp_login. It is deprecated and in later versions of WordPress it may not work at all. Instead try the wp_signon function.
Edit: The wp_login function is depreciateddeprecated but the wp_login action is still fine to use.