coin redirects to index on wrong credentials