add login page and secure other routes
fix blocking issue