changed default route to use csrf_view
removed permissions stuff
finished Logging users in
finished Logging users out