Split out 'login_form.tt' + detect already logged in

If a user is already logged in, a logout link will be displayed instead
of the login form. The logout link will also redirect to the login page
expressly (currently hard coded to /auth/login)