basic user login/logout done