added comments, use right security for login private storage