add login and logout to the api server

tests needed!