fixed login auth