updates to security, adds a login form