tightened up security on login as