added view, etc. for providing login method/API
implemented login (authenticat on each request)