users can sign up and log in