add login, refresh and logout method