fixed login refresh deadlock