moved login to http authentication
removed loginform