login / logout without mock; login data stored in user settings (password encrypted)