update insecure login code for 0.7.2 so tests pass