added login route and controller logic