added security comments to login page