login strategy issues