extract page title to config; dont show login link on login page
login via sql with sql injection possibility