more security, rudimentary hr functionality