loginrequest and -response should now be somewhat safe