fixed a bug with session token's permissions being stored in the db as a string
redirect a user to the login page who isn't logged in on another page
animations on view change

this fixes the jerkyness between views that has been their sience the introduction of routes