fix route for user login