It's good to see this laid out in full - thanks for posting.

One comment: you should not have a zenid hardcoded in the login link.