add sort-of login page.  probably will be replaced by something from
yesod.auth
retrieving user record based on uid in the session