admin can login and logut

used session