added login page, sessions, authenticate, etc