a custom login protection plugin