nothing about paylocity's approach to security looks standard, which is terrible from a security perspective