tweaks for better security on login as