permissions done. login, logout, sessions done. cleaning up