Hybrid mobile apps indeed do not use the desktop/mobile web index.html and login.html files. Instead, you should create anonymous pages that replace that functionality. That means that for login functionality, you probably want to create a page on which you put some kind of login form (there is a custom widget that you could use, or you could create your own), and/or the oauth redirect buttons.