Add app-level security for login handling