cleaner login form, secured urls