fixed login without protected code specified