removed the need for login.mustache, cleaned up controller A TON