login and logout partially processed by server now