add security
tests for login and layout