User loginlogout, without db