Too many things to count here.

- Restricted failed logins to 5 per 2 min (should be changed)
- Added sessions to complete authentication model
- going with the key: value instead of key : value option
- passing in both the req & res variables to controller functions so they have a way of replying to client