first implementation of Login, logout, auth, auth-filter