fix bug user can login all of places