Implemented login, but security sucks