rework towards using snaplets
move handlers into separate file
add login calls
replace default 404 response
code style
adjust auth call routes
add some basic login validation
improve login error message
rework loginHandler