sec: made autologin use current user