basic routes for login, signup, and pass recovery