don't run onAuth callback if app does not require auth

otherwise we will redirect the user to login even tho no auth is needed
move app config/globals to appconfig
inline authenticated route for now
move login and logout components to its own files
move app component to own file
move index route to its own file

also remove randomcolor dependency and use hsl() instead
prune unneeded requires