new features for sample app: some routes, a login functionality (user: 'Chuck Norris', pass: 'kick'), cookie-based autologon, form population filter. refs #161