protected functions, started on login handlers