security fixes & user authentication