login & logout & authentication working