default route to home page
login/logout/invalidlogin events with flash handling