user can log in and out of app, and is assigned to correct role