TODO: record user's login actions