update login/logout, users

remove
check at before action