Fix confusing (and wrong) comment about login() logic