users can login, logout, edit username/password