For /login you should use plugins like AuthMe, this plugin was made to protect admins from people wanting to log into their accounts (brute force password cracking). You don't have to confirm all players, there is a list in the config. Next time read what the page says instead of downloading everything and giving bad reviews. And what do you mean by useless? Look at reviews of your scripts...