mobile app login: check password; remove member: shouldn't delete entry, inactivate instead