tighten login code, should use =, not like