starting login capabilities, added proper config manager
more authentication, added session middleware, refactored routes