adds /login route (ac.login state)