Add a separate /login resource. '/' as the home can now be used for other stuff
outsource doLogin method (DRYit)

Fix passAuthentication check (var || true when var === false is a wrong check)