fixed login, added more security stuff