auth coming

login and logout work