add security for the sql injection attacks
add user login