users can now sign in and sign out