Improving login system:

* now it has its own template,
* it also applies to the /api paths,
* content under /static is still served even when logged off