more fun with login route and sessions
move public index