update findByAttributes for facade, fix login