user login controller fixed thanks to unit tests, hurray!