more view profile, refactor login, add url encode to secure string