more work on login/settings page.
worked with middleware group