Non-oauth login + logout