fixed login. handles pw correctly now