basic login and logout using acl