removed commented code, now multi stage login to avoid looking local redirect issues, xml corrected for buttons, SERVER_URL added to routes