routes are redirected after login to what they were before the login
token expiry, sessions don't clog up the db anymore