backend to JSON, decks template, login made secure, etc