Add login/ app, fix redirection being insecure

Fixes #22