bug in user login