finalizes the user login/logout story and specs

closes #135 @00:20