added vulnerable login and registration