the three actions--'login', 'logout', and 'me'--are all implemented and untested in the user module.