hack around login_action's obtuseness