initial login and user actions