fixed user class for proper login handling