added login route and authentication via passport