implement login/logout

the login story is not passing yet because tracks cannot be listed yet
references #135 @3h