new 'index' state and better login redirection; dispatch index page based on auth status