it should only be called on login to the applicati...