Skeleton of /login handling