get '/login:username:password' => sub {