fixed login to not break when user did not exist