on ch7 security module -- login/security.js