added login route and view, applied auth check on route '/a'