completely reworked login and url patterns