ADDED: user login and logout