postlogin script - still confused