cleaning URLs, adding login page