add validation
login/logout works