updated last login time method
more updates to support public/secret auth and identification in route handlers