login done, except for securing of application