removed depreciated express configure(). set default route to login to avoid extra requests