change to login page + js validation