fix login behavior - ask candidates in access request step