login/logout with uncrypted pw