add login manager, handle login and logout
use post for login, redirect to users.auth_email
store current user in application context
fix methods for login and logout