fix login form + security