fixed login & authentication