authorization

+ login form on main page
+ auth & not auth states for main page