Make login secure, use secure code in AppController