fix bcrypt callback bug, fix login form