login/logout/session, fixes