fixed bug where staff users cannot login to admin site