login route working, on to the hard stuff