Using "*" as Type in get_login bypasses the security restrictions