removed mongojs
changed login form action to session