allow username restriction
fix target type
allow logging
test login/logout