add auth/login/logout