Fixed logins so protected endpoints redirect properly

The login form's action URL now contains a parameter "next", a base64
encoded string, when the user requested a protected endpoint without
previously being logged in. This will be decoded by the login post
handler and will redirect the user to where they wanted to go upon
successful login. The picks endpoint is also now live and functional,
although the post handler needs to be implemented still.
Started work on the standings view