Fix login redirects, tests
Wire login handler
add options for authentication request handlers
secure endpoints behind token
add verbosity flag to start