Security fix on login page