Refactored person into user
Removed username attribute
Moved login HTTP request handler path under authentication