In index.js, the 'login' event listener is added inside the request handler on every successful login, but never removed. Over time, this accumulates listeners on the global emitter, causing a memory leak.
