remove cruft
SECURITY: rate limit user/password login