should this also check if `:login` is present? (eg. `params[:login]` might be `nil`)