fixed error where user info shows in the url