Fixed null reference for $_GET['ref'] if not passed to login.php
Added security.php