basic login
use connect-redis for persistent sessions