improve drop script
make login the default permission