login portal, destroy user

authentication