minilogin checks IP, public login checks user / pass.

Thats the way it is, thats the way it will always be.

There are reasons for this, many of them, all already covered in threads just like this one.