update security issue
overide LOGIN_URL to settings
fix sidebar