api auth login fix