set up more security -- registration and ip login
merge