removed login code from user.js