added a login page. user info gets set upon successful login now. It no longer happens in run block in app.js