cleaned up login route from original login implementation