security + login .. NEEDS TO BE REDESIGN