updated controller.js and login.mustache