user login & basic security configuration