templating, session, authentication implemented