user doesnt have to log in everytime, has to click logout