onLogin / onLogout callbacks