Login with basic validation

Added login capabilities
Added very basic form validation ( fields are not empty ), to prevent unnecessary calls to DB.


<!---
@huboard:{"order":8.0,"milestone_order":27.0,"custom_state":""}
-->

why do you get these from the `req` again when you already have variables for them