login callback bug