moved the login actions to app route