fixed login with empty login and pwd