add api to test logged-in status