user login, logout, & status routes/functions are working