static route in loginAction, more tests #57