Secure it all vs secure just the login...may as well do it all.