login added, some securityu fixes