fix login url in access.js