fixed error where you could log in as anyone