added login controller and route