Authentication now works; user is stored in the session so routes have been reworked to be more generic