fixed login, closes #6