[fix] auth for new login page