add user access & logout