worked on login: prevented user from logging in while already being logged in
moved some stuff around and get it back into a working state
added a todo comment