fix bug in login timeout handler