add guard and #login method
remove .env file