apply login requirements for back-end