cleanup login

app.js

@@ -28,10 +28,14 @@ ss.client.define('login', {
   tmpl: '*'
 });
 
-
-// Serve this client on the admin URL
+// This is the only url that is not protected
 ss.http.route('/login', function(req, res){
-  res.serveClient('login');
+  if(req.session.userId){
+    res.writeHead(302, { 'Location': '/' });
+    res.end();
+  } else {
+    res.serveClient('login');
+  }
 });
 
 // Serve this client on the admin URL
@@ -44,7 +48,6 @@ ss.http.route('/', function(req, res){
   }
 });
 
-
 // Serve this client on the admin URL
 ss.http.route('/admin', function(req, res){
   if(req.session.userId){

client/templates/login/login.html

@@ -14,7 +14,7 @@ <h3>Login</h3>
     <div class="control-group">
       <label class="control-label" for="player-password">Password</label>
       <div class="controls">
-        <input type="text" class="input large" name="name" id="player-password" value="">
+        <input type="password" class="input large" name="name" id="player-password" value="">
         <span class="help-inline">{{ helpText }}</span>
       </div>
     </div>