make nodemon ignore some more files
redirect to login if not logged in
instantiate a SessionUser on each request
add build tasks for css