Two syntax errors needing fixed to allow login on the no-auth endpoint

these are two things that were broken which prevented users not already in the database from logging in.