add login logout signup signout and write a require_login
for af