threw some spring security into the mix. now to figure out how to use
cookies and destroy sessions...