fixed security bugs for login, security and route configration in app/config folder