Fixed condition: it's config.auth instead of config.login.