fix onetime auth
fix normal login