added login route and started implementing it, changed file upload to use multiparty