finally found the login bug