Feature/login api

Initial Commit of Login API.
is the session_id revealed in the link by design? it can be posted as well through a hidden input element