Fix hilariously bad security bug on login

Thanks Mike for finding this