removed /login route from server side