fixup: update last_login in the correct place