on ch7 security module -- login/index.js