first upload
added : user admin control, login, logout