login method - bug