fix allowed_toLogin, closes #53