Minor Bugfix

moved creation of user string out of while loop, otherwise every cycle it resets to "", effectively always logging out the user.