fix login permission