!!important!! change the log in logic

considering that the Auth->login() log everything in, so we should make
some validations all by ourselves.

Signed-off-by: RayAllen <ray@ray-Lenovo-IdeaPad-S400.(none)>