CMS: login controller update