both logout and login work in-place, w/o reloading