- implemented own User(), changed login/logout redirects