enforced login / janky logout