I mean hook into the minimize and set the main forms visible to false. I'm assuming that the form is minimized and thats why you are working in the restore. If the form isnt visible when the resore fires you dont have to worry about the data being displayed to an unautherized user. afer the log in is succesful you could set the visible back to true.

Just a roungh idea.