cleaned up login page, got sessions working