user security and reset pwd
security filter