fixed NPE in login response