persistent user login (not optional)