bug of login permission , part of homepage