Make it all work on https
make cookies secure
Fix up unsecureServer
make sure the cookie is secure. Also better handle re-logging in.
Track users interaction with the login UI
Only allow people who are logged in to add events
style login icons a bit
user name and password must exist
catch no username/password in the UI