- login.php security fix
- moved login.php errors
- created message.php query