clean up unused routes and add session routes
refactor tests
fix flash
fix login error flash so it persists for only one page now
add authentication and update nav for different auth states
finish basic authorization