fix issue #9: confused checklogin() in login.html