moving api requests to /api, creating get api login endpoint, cleaning up some login views