refactored login process to use controller rather than model; cleaned up old code
deleting entries now requires confirmation