Setup login with security on /user