work in progress. first security/login implementation