Fixed login page

must use hardcode credentials