fix bugs in user/login