removed script tags from login page