create an welcome page for login successfull users
store login credentials in session if is marked remember me checkbox so on next login on the same machine we don't need to provide them
create logout action
use encryption to store password