add basic login protection