Add login / logout functionality. Use the flask session object instead
of passing things in