login works now; secured important pages