created the login form stuff. sessions not set up yet