Login changed to use references instead of hard-coded strings