added login route and controller method