adds /app/login and /app/register

Next Up:
access token spec for app views plus receiving messages