fixed login security issues