Move login route into instance app routes file

If the login route is mounted where it was the subsequent middleware
isn't run properly.