insecure login detection works mostly
fixed merge conflict