user access (login, session, logout) documentation