fixed login authentication