update

fixed security issue where people could access anything if they knew any
valid acct. info. Also, added in auto-login functionality thru usage of
having username and password in parameters for building objects