Add login/logout ability. Mark all site as secure area to get access to app.user