fixes #20: Fail to login an existing user