allow login of xmlrpc