finish user login and loginout, but the password not be secreted!