add route to /login
add LoginController
show MainController only for authenticated users with read rights
add HasRole service