load database, session, and form validation libraries
add encryption key
add default avatar
add login model
remove login modal and using /app/login
login function at /app/
redirect if logged in
database changes
add logout link
edit login form