r519: fix bug in authorise_login() that broke security = share