[OIDC] login flow

[jgiannuzzi]

Given a user trying to authenticate on the login page,

• when they provide credentials,
  • when the credentials are valid
    • then they get a session token and get redirected to the original page they came from - or to the main page otherwise (/).
  • when the credentials are invalid
    • then send you back to the login page with an error message.