refactor routes to be more RESTful
simple login form and controller