add auth login/logout