fixed login username and pass check