cleanup
fixed checksession
added instantlogin
made root url unique