refactored login process to be a form submit instead of ajax-redirect, implemented error message parsing using req.flash
added connect-ensure-login and allowed npm to alphabetize the dependencies listing
changing admin API calls to return 404 if unauthenticated, and redirect user to login for regular URL. closes #1885