users can login, purchase tickets and only purchase a certain amount