enhance login and loosen permissions (beware, only OK for developement)