server: signup and login OK