login, logout logic completed, though room for improvement; added to do