commit security vs new login HTTP INTERFACE