a user can login, logout and create an account