move stuff arround, use WTForms and proper login page, use simple login auth