have working sign in / log out with simple validation