fixed REST login