security checks
login failure message
add password complexity requirement