worked on security and user login/logout