add login security / update smoke test