fix user create and login func