fix [UserMixin].AllowLogin