add login page and route

closes #200