fixed login callback order