Got rid of silly basic auth and added a regular auth system... new routes: /login POST, /logout GET