remove wildcard from /user/login action