fix login controller, needed session reference
new post 'create' and 'cancel' functionality
 - check login state
 - use local storage