fixed login callback