Fixed problem where header wasn't getting returned to redirect to Raven
Condition for array_merge was the wrong way around
Added logging
Login no longer incorporates authenticate

Separated these methods out, so that custom conditions could be passed to authenticate after login from the routes. Now login returns either a response/redirect or a boolean, and authenticate returns a boolean.