audit when login - semi done