login/logout & authenticated implemented