TODO: filtrare dupa client; new user form; security