account creation, login, and log out implemented - need validations