0.3-rest : (auto)login in/out [partial]