Session injection, login route

TODO: Login template