login: add authenticate route
login: render index page if authentication fails
logged_in: add dashboard route
logged_in: add index page
logged_in: ensure user session is given (user is logged in)
logged_in: ensure a known user is in user session
login: for successful login redirect to dashboard
login: stores user id into user session