fix login: check the username if exists