changing login logic. add a  used for semi-secret