Added login form, updated contoller to accept a login
-todo nexy: set session at login