stripped down to bare login/logout