diff --git a/demo/src/main/java/com/example/demo/config/SecurityConfig.java b/demo/src/main/java/com/example/demo/config/SecurityConfig.java
index 3d17139..ff2067d 100644
--- a/demo/src/main/java/com/example/demo/config/SecurityConfig.java
+++ b/demo/src/main/java/com/example/demo/config/SecurityConfig.java
@@ -2,8 +2,10 @@ package com.example.demo.config;
 
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.security.config.annotation.web.builders.HttpSecurity;
 import org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder;
 import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.security.web.SecurityFilterChain;
 
 @Configuration
 public class SecurityConfig {
@@ -11,4 +13,20 @@ public class SecurityConfig {
     public PasswordEncoder passwordEncoder() {
         return new BCryptPasswordEncoder();
     }
+
+    @Bean
+    public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
+        http
+                .authorizeHttpRequests(auth -> auth
+                        .requestMatchers("/login", "/css/**").permitAll()
+                        .anyRequest().authenticated()
+                )
+                .formLogin(form -> form
+                        .loginPage("/login")
+//                        .defaultSuccessUrl("/", true)
+                        .permitAll()
+                )
+                .logout(logout -> logout.permitAll());
+        return http.build();
+    }
 }
\ No newline at end of file
diff --git a/demo/src/main/java/com/example/demo/controller/SiteController.java b/demo/src/main/java/com/example/demo/controller/SiteController.java
index 12b7443..f349c45 100644
--- a/demo/src/main/java/com/example/demo/controller/SiteController.java
+++ b/demo/src/main/java/com/example/demo/controller/SiteController.java
@@ -12,4 +12,9 @@ public class SiteController {
         //model.addAttribute("allemplist", employeeServiceImpl.getAllEmployee());
         return "home";
     }
+
+    @GetMapping("/login")
+    public String viewLoginPage(Model model) {
+        return "login";
+    }
 }
\ No newline at end of file
diff --git a/demo/src/main/resources/templates/login.html b/demo/src/main/resources/templates/login.html
index 3832321..989ce48 100644
--- a/demo/src/main/resources/templates/login.html
+++ b/demo/src/main/resources/templates/login.html
@@ -18,9 +18,13 @@
     <main class="main-content">
       <div class="login-box">
         <h2>Log In</h2>
-        <form action="/login" method="post">
+        <div th:if="${param.error}">
+          Invalid username and password.</div>
+        <div th:if="${param.logout}">
+          You have been logged out.</div>
+        <form th:action="@{/login}" method="post">
           <label for="username">Username</label>
-          <input type="text" id="user" name="user" required>
+          <input type="text" id="username" name="username" required>
 
           <label for="password">Password</label>
           <input type="password" id="password" name="password" required>