all pages except login are protected now

cleanup login form