login changed - several updates for user restriction