I'm currently working on a site for a client who's a bit overly paranoid. When he learned that all drupal sites have a login page at /user/login he asked me to change that path to something else so he "won't get hacked".
I can't seem to figure out how to do it! Anyone have an idea? I've checked site info and other parts of the admin menu, my settings.php, no luck.