user functionality is working (log in / out)