add user check (login/logout)