added login authentication and route to secret page
added session logic to secret page to pre check when loading if user has a session