Fix really simple injection that enabled one to login. Oops.