Root checks if you're logged in and displays actions appropriately
Token and secret works. Storing these in session